Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3232392e302f32342d3234203d3e20323633373832.roa
File:                     3133382e3132312e3232392e302f32342d3234203d3e20323633373832.roa (raw, json)
Hash identifier:          eQptkCnoPagHuE1/eM3tSe1F5CBryx9WtUvwIzV3d98=
Subject key identifier:   32:04:8E:9F:C6:67:16:9D:FC:90:6B:DE:8E:55:3D:D4:B2:51:EB:3F
Certificate issuer:       /CN=9546A908853C34D10445938EC0A727E092D120C7
Certificate serial:       76D8539754A07F755B74D35AEF600028742F98CB
Authority key identifier: 95:46:A9:08:85:3C:34:D1:04:45:93:8E:C0:A7:27:E0:92:D1:20:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3232392e302f32342d3234203d3e20323633373832.roa
Signing time:             Wed 25 Feb 2026 12:10:01 +0000
ROA not before:           Wed 25 Feb 2026 12:05:01 +0000
ROA not after:            Wed 24 Feb 2027 12:10:01 +0000
asID:                     263782
IP address blocks:        138.121.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Mar 2026 04:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d8:53:97:54:a0:7f:75:5b:74:d3:5a:ef:60:00:28:74:2f:98:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9546A908853C34D10445938EC0A727E092D120C7
        Validity
            Not Before: Feb 25 12:05:01 2026 GMT
            Not After : Feb 24 12:10:01 2027 GMT
        Subject: CN=32048E9FC667169DFC906BDE8E553DD4B251EB3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:74:06:da:40:97:b0:8c:92:3d:77:94:b2:32:
                    59:f8:49:39:70:e2:75:c9:d6:f5:0b:b6:85:c9:f0:
                    bf:a7:52:ab:1d:5e:52:d0:91:23:08:dc:fd:05:d6:
                    5b:d7:db:49:8b:36:8e:57:1b:0c:33:f6:d0:4e:d7:
                    b2:f3:d7:e6:d6:8c:92:15:fd:e2:2d:87:a3:18:1b:
                    af:ff:a4:29:6a:d5:e0:ff:5f:61:8d:51:97:0d:7c:
                    c0:07:e9:75:1d:fd:76:78:ea:b9:39:8c:02:21:f7:
                    e9:7e:ad:85:ba:df:d4:19:84:e2:e6:32:80:0c:85:
                    36:04:2b:93:40:a9:38:80:df:d3:47:1b:58:7c:88:
                    77:b9:c5:7d:0d:75:b0:cd:74:f2:b9:52:be:6a:f5:
                    e9:83:26:b7:ed:99:52:87:6d:f0:9a:20:68:7d:06:
                    8e:05:46:b0:42:2c:2b:28:96:f7:a0:dd:ca:49:9a:
                    9b:6f:81:61:f0:f4:8c:d5:ec:8f:24:e9:9a:b4:97:
                    66:6c:cf:96:dd:f0:22:5e:db:c7:a3:bd:7d:88:b9:
                    31:70:23:12:ef:3e:c6:4d:27:2d:d9:8d:48:0c:17:
                    e3:5a:66:46:2b:f1:12:88:1c:69:90:57:40:36:bc:
                    b4:e7:ca:a4:f6:d7:d0:c9:e4:5b:0c:10:9b:4e:6a:
                    0b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:04:8E:9F:C6:67:16:9D:FC:90:6B:DE:8E:55:3D:D4:B2:51:EB:3F
            X509v3 Authority Key Identifier:
                keyid:95:46:A9:08:85:3C:34:D1:04:45:93:8E:C0:A7:27:E0:92:D1:20:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/9546A908853C34D10445938EC0A727E092D120C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9546A908853C34D10445938EC0A727E092D120C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8026F9EAB357F4713CE977A44F0ECE798CDCE479B4A4DCBB00FBFBBFCB043D9B/0/3133382e3132312e3232392e302f32342d3234203d3e20323633373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:e8:45:d4:9f:28:9e:df:f8:60:32:8c:bc:d5:50:a6:27:a0:
         1a:18:72:e2:5b:b8:f3:78:bb:b7:48:09:c8:69:d1:ff:3f:5b:
         70:32:f2:25:60:9b:fc:52:01:47:06:21:ff:76:e4:ab:69:82:
         6c:b7:bf:ab:bc:7f:17:c0:9f:a1:14:7f:aa:74:4f:50:b7:fd:
         af:4e:64:ca:b9:4b:39:15:f3:56:13:e4:3d:ea:63:83:f6:63:
         48:16:96:5f:a9:b5:ec:bd:54:b8:c3:7d:d4:df:f1:5c:c3:f5:
         38:71:69:fc:a8:ce:ef:13:b9:48:53:3d:b4:a1:40:80:04:b1:
         9d:cb:6f:42:da:f2:0f:62:3d:45:c2:f9:89:89:ba:5e:90:17:
         05:bc:6e:95:b8:ff:06:9c:78:97:be:46:36:a5:06:0b:52:38:
         0c:6b:9c:5f:c2:d3:03:fa:a9:d1:ca:0c:ee:18:d0:58:33:89:
         5d:f0:bb:f4:35:ae:35:c1:d1:1b:5d:06:ad:40:0b:ee:bc:64:
         fd:ba:ad:5b:8d:19:a3:bf:f5:33:47:f4:6a:f8:14:18:ad:65:
         6b:9b:07:d7:3c:ee:82:34:63:b6:62:f5:6d:6b:7d:4f:68:2f:
         58:67:f3:12:d6:aa:47:6f:b2:64:2c:33:69:bf:4e:09:85:5a:
         ce:fd:05:fe
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUdthTl1Sgf3VbdNNa72AAKHQvmMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU0NkE5MDg4NTNDMzREMTA0NDU5MzhFQzBBNzI3RTA5
MkQxMjBDNzAeFw0yNjAyMjUxMjA1MDFaFw0yNzAyMjQxMjEwMDFaMDMxMTAvBgNV
BAMTKDMyMDQ4RTlGQzY2NzE2OURGQzkwNkJERThFNTUzREQ0QjI1MUVCM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5dAbaQJewjJI9d5SyMln4STlw
4nXJ1vULtoXJ8L+nUqsdXlLQkSMI3P0F1lvX20mLNo5XGwwz9tBO17Lz1+bWjJIV
/eIth6MYG6//pClq1eD/X2GNUZcNfMAH6XUd/XZ46rk5jAIh9+l+rYW639QZhOLm
MoAMhTYEK5NAqTiA39NHG1h8iHe5xX0NdbDNdPK5Ur5q9emDJrftmVKHbfCaIGh9
Bo4FRrBCLCsolveg3cpJmptvgWHw9IzV7I8k6Zq0l2Zsz5bd8CJe28ejvX2IuTFw
IxLvPsZNJy3ZjUgMF+NaZkYr8RKIHGmQV0A2vLTnyqT219DJ5FsMEJtOagtTAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUMgSOn8ZnFp38kGvejlU91LJR6z8wHwYDVR0j
BBgwFoAUlUapCIU8NNEERZOOwKcn4JLRIMcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84MDI2RjlFQUIzNTdGNDcxM0NFOTc3QTQ0RjBFQ0U3OThD
RENFNDc5QjRBNERDQkIwMEZCRkJCRkNCMDQzRDlCLzAvOTU0NkE5MDg4NTNDMzRE
MTA0NDU5MzhFQzBBNzI3RTA5MkQxMjBDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NTQ2QTkwODg1M0MzNEQxMDQ0
NTkzOEVDMEE3MjdFMDkyRDEyMEM3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODAyNkY5RUFCMzU3RjQ3MTNDRTk3N0E0NEYwRUNFNzk4Q0RDRTQ3OUI0
QTREQ0JCMDBGQkZCQkZDQjA0M0Q5Qi8wLzMxMzMzODJlMzEzMjMxMmUzMjMyMzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzMzNzM4MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACK
eeUwDQYJKoZIhvcNAQELBQADggEBAELoRdSfKJ7f+GAyjLzVUKYnoBoYcuJbuPN4
u7dICchp0f8/W3Ay8iVgm/xSAUcGIf925Ktpgmy3v6u8fxfAn6EUf6p0T1C3/a9O
ZMq5SzkV81YT5D3qY4P2Y0gWll+ptey9VLjDfdTf8VzD9Thxafyozu8TuUhTPbSh
QIAEsZ3Lb0La8g9iPUXC+YmJul6QFwW8bpW4/waceJe+RjalBgtSOAxrnF/C0wP6
qdHKDO4Y0FgziV3wu/Q1rjXB0RtdBq1AC+68ZP26rVuNGaO/9TNH9Gr4FBitZWub
B9c87oI0Y7Zi9W1rfU9oL1hn8xLWqkdvsmQsM2m/TgmFWs79Bf4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:21:16 2026 by rpki-client